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^^^^ul lm A meth ° d f ° r deleting entries from a 
--^directory in which directory information is stored in a 
15 set of database tables, comprising the steps of: 

responsive to a request to delete a directory 
entry, tagging the directory entry in a first table; 

periodically searchinc for tagged entries in the 
first table during a cleanup process interval; and 

deleting references to the tagged entries 
throughout the set of database tables* 

2. The method as described in Claim 1 wherein 
24 the directory entry is tagged by setting its creation 
time to a given value. 



29 



The method as described in Claim 2 wherein 



the given value is a nulfL value, 



4. The method as /described in Claim 1, further 
including the steps of: 

performing a seardh for directory entries that 
satisfy a search query] and 
34 excluding tagged entries from search results that 

otherwise satisfy the/search query. 
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5. The method as described in Claim 4 wherein 



the step of excluding taggec. 
an SQL query to exclude rows 
creation. 



6. The method as described in Claim 1 wherein 
the directory is a Lightweight Directory Access 
Protocol (LDAP) directory se 
tables are managed by a relational database management 

10 service. 

7. The method as described in Claim 1 wherein 
the first table is an entry table, 



entries includes modifying 
having a null change 



15 8. The method as descr 

the set of database tables ijic 
attribute table storing in 



ibed in Claim 7 wherein 
ludes at least one 

ion about an attribute, 



fojtrmat 
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9. A method for dele 



ting entries from a 



directory in which directory information is stored in a 
set of database tables, combrising the steps of: 

responsive to a requestt to delete a directory 
entry, tagging the director^ entry in a first table; 

responsive to a search tor directory entries that 
satisfy a search query, excluding tagged entries from 



search results that otherwise 



satisfy the search query; 



periodically searching fbr tagged entries during a 
12 cleanup process interval; and 

deleting references to trie tagged entries 
throughout the set of database! tables. 



10. The method as described in Claim 9 wherein 
35 the directory entry is tagged qy setting its creation 

time to a given value. 

11. The method as described in Claim 10 wherein 



40 



the given value is a null value 

12. The method as describ 
the first table is an entry tab 



d in Claim 9 wherein 
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13. The method as c/escribed in Claim 12 wherein 

ss includes at least one 
information about an attribute. 



the set of database table 
attribute table storing 



5 14. A method for searching a database from a 

directory service, comprising the steps of: 

responsive to a seafch for directory entries that 
satisfy a search query, /excluding given entries from 
search results that otherwise satisfy the search query, 
10 wherein the given entries identify database entries 
that have been tagged fpr deletion; and 
returning the search results 



15. The method a 
15 the directory service 



described in Claim 14 wherein 
s a Lightweight Directory Access 
Protocol (LDAP) directory service and the database is 
managed by a relational database management service. 



16. A computer /program product in a 
20 computer-readable medium for deleting entries from a 

directory in which directory information is stored in a 
set of database tables, comprising: 

means responsive to a request to delete a 
directory entry f</r tagging the directory entry in a 
25 first tabled 
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means for periodically searching y£or tagged 

entries in the first table during a ^leanup process 

interval; and 

means for deleting referenced to the tagged 

entries throughout the set of database tables, 

17. The computer program /product as described in 
Claim 16, further including: 

means responsive to a search for directory entries 
that satisfy a search query/for excluding tagged 
entries from search result^ that otherwise satisfy the 
search query, 

18. The computer program product as described in 
Claim 17 wherein the syearch query is a Lightweight 
Directory Access Protpcol (LDAP) directory service 
query. 

19. A directory service, comprising: 
a directory/organized as a naming hierarchy having 

a plurality of gentries each represented by a unique 
identifier; 

a relational database management system having a 
backing store for storing directory data in a set of 
database t4bles; and 
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means for deleting entries from thfe directory, 

comprising: / 

means responsive to a requfest to delete a 
directory entry for tagging t/he directory entry in 
a first table; / 

means for periodically searching for tagged 
entries in the first tab/e during a cleanup 
process interval; / 

means for deleting references to the tagged 
entries throughout tne set of database tables; and 

means respons/ve to a search for directory 
entries that sati/sfy a search query for excluding 
tagged entries from search results that otherwise 
satisfy the search query. 

20. The d/rectory service as described in Claim 
19 wherein thor directory is compliant with the 
Lightweight directory Access Protocol (LDAP) . 
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